Product Overview

The HIMA F2DO801 is a high-integrity remote output module designed to extend the I/O capabilities of HIMax and HIMatrix safety controllers via safeethernet. Housed in a durable, compact metal enclosure, this module provides eight potential-free, normally open relay outputs for safety-critical field device control. While it does not execute local user programs, it functions as a transparent and reliable link within a distributed safety architecture, translating safe network commands into physical relay actions.

This remote I/O unit is engineered for the most demanding functional safety requirements, offering a deterministic response time of ≥20 ms. It is an ideal solution for emergency shutdown (ESD) systems and process control environments where decentralized I/O is necessary to reduce wiring costs and improve system modularity.

Technical Characteristics

• Output Channels: 8 Potential-free normally open (NO) relay outputs

• Safety Certifications: SIL 3 (IEC 61508/61511), SIL 4 (EN 50126/50128/50129), PL e (EN ISO 13849-1)

• Operating Voltage: 24 VDC (Tolerance: -15% to +20%)

• Switching Capacity: Supports 5 V up to 250 VAC or 250 VDC

• Input Current: Maximum 0.6 A

• Communication: Ethernet-based safeethernet protocol

• Installation Environment: Approved for ATEX Ex-zone 2 hazardous areas

• Response Time: Typical response ≥20 ms

• Safety Principle: Supports "De-energize to Trip" (fail-safe) and "Energize to Trip" applications

• Housing: Robust metal industrial enclosure

• Dimentions:4x19x12.8cm

• Weight: 0.3 kg

Operational Reliability and Diagnostics

The F2DO801 is built with the "De-energize to Trip" safety philosophy as its core function. In the event of a communication failure or internal system fault, all outputs revert to a de-energized safe state. However, the module is intelligent enough to isolate channel-specific faults, ensuring that an error on one output does not unnecessarily interrupt the operation of the remaining seven channels.

Equipped with sophisticated diagnostic tools, the module features a prominent "FAULT" LED for immediate visual inspection in the field. Detailed error codes are transmitted back to the central controller, allowing for granular troubleshooting and predictive maintenance within the TIA or SILworX engineering environment. Designed for long-term stability, the module requires no internal battery and is protected via external 10 A time-lag (T) fuses, ensuring it can withstand the electrical transients typical of heavy industrial manufacturing and energy sectors.